This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json) Hash identifier: J3XAsE+ki542gv7ZPrM7N1HX2nxa7o+kcA8quWsBgxY= Subject key identifier: 26:C7:02:B5:21:B8:99:33:F7:2B:FE:AF:60:C1:4F:6F:EB:D0:7C:34 Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d Certificate serial: 019C43590B987B2FC0DA1C7F2B7D9FC1086F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft Manifest number: 0F1D Signing time: Mon 09 Feb 2026 17:00:34 +0000 Manifest this update: Mon 09 Feb 2026 17:00:34 +0000 Manifest next update: Tue 10 Feb 2026 17:00:34 +0000 Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=) 2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: zeftQW/TWNRXkb5Ixn6nTVtgASFMpjRIr5/ElZnuEQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:0b:98:7b:2f:c0:da:1c:7f:2b:7d:9f:c1:08:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d Validity Not Before: Feb 9 17:00:34 2026 GMT Not After : Feb 10 17:00:34 2026 GMT Subject: CN=26c702b521b89933f72bfeaf60c14f6febd07c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:18:ea:f3:35:12:69:65:74:fc:84:3c:67:ad: 78:c8:d6:63:ac:72:6e:7e:f2:70:91:fe:a1:80:cd: e8:0e:a6:da:dd:ec:4f:60:8d:2b:4c:6e:0d:05:e1: a9:b9:0e:85:5d:a8:f4:65:5a:72:46:af:2d:a0:78: 41:67:26:7d:44:e7:df:7f:85:d3:e0:b4:be:c2:22: 87:00:cb:37:66:6c:82:c8:a0:71:ae:61:7f:40:56: 95:20:38:3e:14:7f:c8:94:05:5f:aa:ae:c5:bc:f8: 2f:d5:60:7f:17:08:af:4e:bd:54:83:87:66:62:75: df:7b:22:9e:36:3d:b8:69:fb:e0:8a:05:e8:2a:c6: 72:56:dd:44:c5:fd:42:2e:7f:f8:c0:ac:56:f7:9f: 8c:f6:5a:78:98:d5:33:43:b7:79:89:e6:88:02:03: c8:6c:8f:b1:48:a5:04:76:3d:91:35:1f:74:7e:8a: f0:6b:5b:1f:e1:1e:b5:ce:bb:49:e9:de:e1:2f:d4: de:28:55:2f:a4:10:43:9c:1f:d7:bf:98:f4:a6:68: bb:d1:6e:bf:e8:51:d3:8a:01:ab:2d:24:d2:58:36: fe:cc:8e:77:54:39:0b:0f:cf:13:80:f8:cc:da:8c: e2:e9:32:18:80:83:ff:93:6a:88:73:02:a9:b6:0e: e0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C7:02:B5:21:B8:99:33:F7:2B:FE:AF:60:C1:4F:6F:EB:D0:7C:34 X509v3 Authority Key Identifier: keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:78:9b:7c:0c:5f:3e:f7:ce:1a:2e:aa:78:63:f1:ee:db:44: b0:d9:0a:32:06:d4:c0:e4:b3:b2:10:49:56:04:94:82:91:38: df:3e:6a:32:57:50:7d:9a:a6:f9:03:d4:3a:d3:d8:96:5f:c8: 4a:3c:a6:68:81:51:d9:16:cd:3c:05:6f:a2:2f:f1:d9:50:b0: 5b:aa:31:eb:ea:3b:f2:ea:57:0e:a6:74:72:d0:6b:4e:c5:d7: 0a:6b:c3:9e:c8:8a:ad:08:22:35:b6:fa:21:bd:c8:9f:e4:cb: 6f:1a:3e:b9:3c:9b:96:0e:9f:87:c6:0b:1f:a0:5c:4c:80:ce: 8a:53:6b:51:29:70:c2:c7:c3:85:45:01:0c:05:3c:7a:61:34: d4:af:78:e2:06:88:ec:63:e1:cc:2d:da:6a:22:3a:72:82:3e: 05:93:84:a4:0c:bf:67:4b:0b:95:8f:7b:b4:08:3c:18:06:5c: 41:76:49:6d:80:5d:67:e3:98:d9:fc:9a:48:c9:cd:a9:f1:29: ed:2a:aa:ac:83:0e:70:00:1f:23:5b:0d:e5:5f:84:48:02:41: 20:6e:18:03:43:01:53:0d:fa:0b:03:00:be:99:b8:40:6c:11: 53:13:0d:94:3d:d7:2e:b0:83:97:35:f5:88:0e:01:ea:6b:52: fb:d2:07:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWQuYey/A2hx/K32fwQhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZWU3ZWQ0YTZhOTEwNTRlNmJjMjQ5ODY5M2ZlMGMyZjg2 MjEwMWQwHhcNMjYwMjA5MTcwMDM0WhcNMjYwMjEwMTcwMDM0WjAzMTEwLwYDVQQD EygyNmM3MDJiNTIxYjg5OTMzZjcyYmZlYWY2MGMxNGY2ZmViZDA3YzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xjq8zUSaWV0/IQ8Z614yNZjrHJu fvJwkf6hgM3oDqba3exPYI0rTG4NBeGpuQ6FXaj0ZVpyRq8toHhBZyZ9ROfff4XT 4LS+wiKHAMs3ZmyCyKBxrmF/QFaVIDg+FH/IlAVfqq7FvPgv1WB/FwivTr1Ug4dm YnXfeyKeNj24afvgigXoKsZyVt1Exf1CLn/4wKxW95+M9lp4mNUzQ7d5ieaIAgPI bI+xSKUEdj2RNR90forwa1sf4R61zrtJ6d7hL9TeKFUvpBBDnB/Xv5j0pmi70W6/ 6FHTigGrLSTSWDb+zI53VDkLD88TgPjM2ozi6TIYgIP/k2qIcwKptg7g9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbHArUhuJkz9yv+r2DBT2/r0Hw0MB8GA1UdIwQY MBaAFHHuftSmqRBU5rwkmGk/4ML4YhAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEt ZmM1Y2M2NGRiNzQ5LzEvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEtZmM1Y2M2NGRiNzQ5 LzEvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3ibfAxf PvfOGi6qeGPx7ttEsNkKMgbUwOSzshBJVgSUgpE43z5qMldQfZqm+QPUOtPYll/I SjymaIFR2RbNPAVvoi/x2VCwW6ox6+o78upXDqZ0ctBrTsXXCmvDnsiKrQgiNbb6 Ib3In+TLbxo+uTyblg6fh8YLH6BcTIDOilNrUSlwwsfDhUUBDAU8emE01K944gaI 7GPhzC3aaiI6coI+BZOEpAy/Z0sLlY97tAg8GAZcQXZJbYBdZ+OY2fyaSMnNqfEp 7SqqrIMOcAAfI1sN5V+ESAJBIG4YA0MBUw36CwMAvpm4QGwRUxMNlD3XLrCDlzX1 iA4B6mtS+9IHGw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:22 2026 by rpki-client